Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File:                     l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier:          fopP7S3uDMIey5bgVKujACnZWZN+PyZzySLrEQzeW70=
Subject key identifier:   68:40:CE:05:82:49:F0:33:0D:20:3A:64:4D:B8:75:9A:46:9D:55:BA
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer:       /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial:       0195E00FEBA1B390CE2E9FA0648197B12D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number:          07D0
Signing time:             Sat 29 Mar 2025 04:01:34 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:34 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:34 +0000
Files and hashes:         1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
                          2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: vFhEgJbeCKj+sg+awBR92GyCf9tKP0ZptkkvaVF1Z0A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:eb:a1:b3:90:ce:2e:9f:a0:64:81:97:b1:2d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
        Validity
            Not Before: Mar 29 04:01:34 2025 GMT
            Not After : Mar 30 04:01:34 2025 GMT
        Subject: CN=6840ce058249f0330d203a644db8759a469d55ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:f2:c0:50:af:7e:88:29:84:f2:63:33:8b:
                    0b:d8:8e:91:08:7b:86:6c:9b:74:b4:c3:4a:22:90:
                    c4:1e:0d:8d:5c:aa:c2:67:fe:43:e5:63:d7:94:09:
                    37:d6:c1:71:f6:41:80:1c:bd:23:d8:a8:b5:08:7d:
                    a3:3d:7e:cd:05:1d:8c:f0:ae:da:43:02:b7:98:34:
                    48:3d:91:d7:7b:d0:65:ea:19:45:7a:f1:7c:43:38:
                    11:9a:3f:e6:a4:d0:d0:cc:48:a0:db:85:81:da:ea:
                    70:02:cb:e0:9d:46:84:f4:a5:e8:2c:7f:a0:64:50:
                    bc:ce:50:b7:4a:ee:2b:e7:76:9f:03:bb:a0:b0:4b:
                    41:89:83:fc:10:ce:b7:46:04:cf:43:92:ba:70:dc:
                    51:2e:e9:52:ca:ab:dd:09:29:10:5a:23:57:bc:4e:
                    d8:ec:fc:94:65:6c:7d:da:d9:fb:10:94:0e:12:7e:
                    cb:4e:9a:39:2b:7f:27:81:f6:33:ca:c4:cf:f0:f1:
                    9a:14:1d:ca:83:d8:d3:f3:c6:c1:f4:e6:72:7f:27:
                    9a:b8:67:e1:0e:93:08:14:73:b6:f7:47:61:d3:63:
                    19:7e:33:0a:70:41:b9:86:57:a5:40:87:2a:01:6d:
                    a7:9e:f8:9c:14:0c:44:b8:4e:1f:b5:1e:b5:88:76:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:40:CE:05:82:49:F0:33:0D:20:3A:64:4D:B8:75:9A:46:9D:55:BA
            X509v3 Authority Key Identifier:
                keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:67:e1:f7:4c:47:a5:53:c6:9d:a5:e9:01:c3:bd:5b:1e:
         64:10:d9:18:6d:75:b3:72:54:a9:ad:71:e3:b4:b6:77:54:d6:
         5c:0a:cf:e6:49:57:11:68:ae:e4:db:b5:92:95:f3:94:37:85:
         b8:b3:ea:7d:78:0c:45:67:e0:a2:e4:a1:1c:f3:33:d9:11:55:
         84:8c:3d:ca:17:04:51:a4:75:7c:a1:12:3c:e2:9d:d7:8e:e3:
         88:47:a8:41:d6:d1:c9:36:9a:26:c9:47:15:18:13:4d:36:fd:
         6b:a8:73:ee:52:da:22:b8:7a:6e:bf:3d:85:15:cd:47:f9:e0:
         42:ea:43:d2:08:a0:21:fc:c8:4e:57:dc:05:4c:eb:3b:ef:0b:
         90:e9:be:c2:3f:94:47:7b:3b:9a:d7:48:14:de:2a:75:50:d5:
         42:57:b9:fa:8d:d4:72:99:6c:ce:3d:8b:d9:fc:68:eb:c2:5c:
         b4:92:32:93:6c:c8:b6:2b:3d:8e:0e:3d:17:f0:26:0a:5e:83:
         45:9a:86:33:c1:44:b7:bb:1a:98:3e:09:53:26:2d:78:bc:46:
         b5:39:5c:69:6d:ed:0a:02:64:e1:35:76:88:d6:50:43:0a:ff:
         17:de:d1:24:97:eb:92:b6:db:34:23:67:16:9c:15:16:46:0e:
         dc:bb:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----